#pipelock

Capture and Replay: Testing Security Policy Without Production Risk

🖼️

0Read More

Capture and Replay: Testing Security Policy Without Production Risk

DEV Community·Josh Waldrep·6 months ago

#kfEulX1r

#why #security #replay #operator #contract

You cannot change a security policy in production without breaking somebody's workflow somewhere....

15s

Pipelock Agent Egress Control: the missing CI primitive for AI agents

🖼️

0Read More

Pipelock Agent Egress Control: the missing CI primitive for AI agents

DEV Community·Josh Waldrep·6 months ago

#zWYApltp

#v010releasenotes #security #ai #pipelock #agent

TL;DR. Pipelock Agent Egress Control is a GitHub Action. It runs an agent script inside a Linux...

15s

Block-Reason Headers: Make Your Security Proxy Tell You Why

🖼️

0Read More

Block-Reason Headers: Make Your Security Proxy Tell You Why

DEV Community·Josh Waldrep·6 months ago

#ggR6nxdM

#security #ai #opensource #agent #block

When a security proxy blocks an agent's request, the agent sees a 4xx and has to guess what happened....

15s

subPath ConfigMap Mounts Don't Hot-Reload: Silent Drift in Kubernetes

🖼️

0Read More

subPath ConfigMap Mounts Don't Hot-Reload: Silent Drift in Kubernetes

DEV Community·Josh Waldrep·6 months ago

#tEzJxBDS

#why #security #ai #configmap #pipelock

A Pipelock instance running in a Kubernetes cluster watched its config file for hours while four...

15s

The Three-UID Containment Pattern for AI Agents on Linux

🖼️

0Read More

The Three-UID Containment Pattern for AI Agents on Linux

DEV Community·Josh Waldrep·6 months ago

#pfh17pgx

#why #security #ai #agent #proxy

A correct AI agent containment model on a Linux workstation needs three Linux UIDs, not two. Two UIDs...

15s

What CSA, SANS, and OWASP Just Told Every CISO About Runtime Agent Security

🖼️

0Read More

What CSA, SANS, and OWASP Just Told Every CISO About Runtime Agent Security

DEV Community·Josh Waldrep·6 months ago

#P3t5Gz9C

#ai #security #opensource #owasp #devops

The paper On April 13, 2026, the CSA CISO Community, SANS, and the OWASP GenAI Security Project published "The AI Vulnerability Storm: Building a Mythos-Ready Security Program" (v0.4).…

15s

Menu

Capture and Replay: Testing Security Policy Without Production Risk

Pipelock Agent Egress Control: the missing CI primitive for AI agents

Block-Reason Headers: Make Your Security Proxy Tell You Why

subPath ConfigMap Mounts Don't Hot-Reload: Silent Drift in Kubernetes

The Three-UID Containment Pattern for AI Agents on Linux

What CSA, SANS, and OWASP Just Told Every CISO About Runtime Agent Security